Re: [spamdyke-users] RBLs

2014-03-08 Thread Gary Gendel
Almost all of my uncaught spam comes from two domains: colocrossing.com hostnoc.net The latter usually has the ip address in the rdns so you can trap it that way, but I just block them entirely. With these two out of the way, and barracudacentral and zen.spamhaus, my users see almost no spam.

Re: [spamdyke-users] RBLs

2014-03-08 Thread Angus McIntyre
On Mar 8, 2014, at 6:52 AM, Gary Gendel g...@genashor.com wrote: Almost all of my uncaught spam comes from two domains: colocrossing.com hostnoc.net Color me unsurprised. I even think I know which spammer you're referring to. HostNoc/BurstNet has long had a reputation of being a

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
On 3/8/2014 7:03 AM, Angus McIntyre wrote: TL;DR: if you null-route every IP that HostNoc owns, it will make a dramatic difference to the amount of spam you see. Angus, To what does the TL;DR refer? How are you null-routing all those IPs? With spamdyke somehow? Bucky PS - this is a

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
My list consists of b.barracudacentral.org zen.spamhause.org Barracuda is not a relevant Blacklist. The most serious in (in this Order) are: zen.spamhaus.org bl.spamcop.net bl.mailspike.net ___ spamdyke-users mailing list

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
On 3/8/2014 7:18 AM, Lutz Petersen wrote: Instead make this spamdyke.conf Settings: dns-blacklist-entry=bl.mailspike.net This is the one causing all sorts of mischief lately - blacklisting and unblacklisting legit and non-spamming IPs rapidly. What is wrong with barracuda? You said it

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
What is wrong with barracuda? You said it isn't relevant. What does that mean? The barracuda list is not maintained as the other lists. Beware - ist needs _huge_ manpower to produce good lists. Spamhaus and Spamcop have worldwide offices working 24/7. Barracuda not; the only usage of

Re: [spamdyke-users] RBLs

2014-03-08 Thread Angus McIntyre
BC wrote: On 3/8/2014 7:03 AM, Angus McIntyre wrote: TL;DR: if you null-route every IP that HostNoc owns, it will make a dramatic difference to the amount of spam you see. To what does the TL;DR refer? TL;DR is Internet slang for 'Too Long; Didn't Read'. As it's used now, it's a way for

Re: [spamdyke-users] RBLs

2014-03-08 Thread Dossy Shiobara
Funny, based on my own empirical evidence, Barracuda Central's DNSBL yields the best results. As with anything on the Internet, be skeptical and collect your own data. Доверяй, но проверяй (doveryai, no proveryai). *** 9373 92.80% DENIED_RBL_MATCH --- Breakdown --- 6956

Re: [spamdyke-users] RBLs

2014-03-08 Thread Dossy Shiobara
And, anyone who wants to do just this, here's a handy list of hostnoc snowshoe netblocks documented: http://www.spamhaus.org/sbl/listings/hostnoc.net On 3/8/14 9:58 AM, Angus McIntyre wrote: Basically, my TL;DR was saying If you refuse to accept any communication whatsoever from this entire

Re: [spamdyke-users] RBLs

2014-03-08 Thread BC
Okay, thanks for the excellent explanation and I know how to null route an IP at the firewall. On 3/8/2014 7:58 AM, Angus McIntyre wrote: BC wrote: On 3/8/2014 7:03 AM, Angus McIntyre wrote: TL;DR: if you null-route every IP that HostNoc owns, it will make a dramatic difference to the

Re: [spamdyke-users] RBLs

2014-03-08 Thread Lutz Petersen
Funny, based on my own empirical evidence, Barracuda Central's DNSBL yields the best results. 99% of this Hits are false positives: 6956 81.35% b.barracudacentral.org You are talking simply nonsense ! ___ spamdyke-users mailing list